> On 04 Mar 2016, at 03:58, Melissa Pilgrim <[email protected]> > wrote: > > Now that pf in 10.2 supports IPv6 fragments, how do you configure pf to allow > them? I'm still seeing UDP PMTU breakage specifically with FreeBSD and pf > related to the packet filter not passing fragments. The basic "fragment > reassemble" scrub rule doesn't seem to be sufficient. The man page was not > updated with the commit, and I'm not having any luck with web searches.
The ‘scrub all fragment reassemble’ rule should be sufficient. Can you post your pf.conf and a network capture demonstrating the problem? Thanks, Kristof _______________________________________________ [email protected] mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[email protected]"
